Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3137372e32332e382e302f32312d3231203d3e203533313132.roa
File:                     3137372e32332e382e302f32312d3231203d3e203533313132.roa (raw, json)
Hash identifier:          N0GaN/knCvNLpZFnoi1UCTqUAJcu0m/RMmPx/cLefHo=
Subject key identifier:   DB:8C:8D:7D:ED:D1:D8:33:08:8C:B3:8D:31:21:CA:AB:3A:24:4A:2F
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       6DA87BB2FE33975AE292C4689C69392B11E0D124
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3137372e32332e382e302f32312d3231203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        177.23.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a8:7b:b2:fe:33:97:5a:e2:92:c4:68:9c:69:39:2b:11:e0:d1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=DB8C8D7DEDD1D833088CB38D3121CAAB3A244A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:49:d0:12:a8:31:f8:f3:9a:c4:1f:c4:66:
                    8e:81:3b:d7:d8:f3:bf:7b:99:6d:7c:30:57:79:96:
                    80:c8:30:3b:66:a9:b4:46:66:f2:31:6b:a0:73:0a:
                    fc:03:da:da:53:c2:b1:38:9f:10:ac:d0:d2:3a:47:
                    a1:2b:84:c0:f9:bf:3b:86:ac:3f:04:79:47:37:2f:
                    3b:71:d5:50:66:65:79:e9:84:02:ab:c1:f4:3a:5d:
                    c6:2f:28:83:0f:db:8d:32:90:d8:6e:fb:73:63:da:
                    7d:19:f6:b4:c1:90:d6:4e:ad:41:9b:3e:e5:0c:e1:
                    23:20:58:88:85:79:e0:f5:8b:53:e7:b0:a8:d1:4b:
                    cb:65:6c:7b:42:bd:d6:26:9d:4f:4d:8e:eb:7d:97:
                    c0:27:80:95:f3:6b:2e:42:51:03:9f:36:50:80:b0:
                    85:07:19:8a:49:ad:ae:49:7e:39:e5:7d:78:82:14:
                    e3:91:2f:e0:09:0c:29:ad:e0:c5:ec:db:49:db:a7:
                    3e:bc:3b:63:e1:02:d4:3a:95:e6:e6:42:eb:01:bc:
                    2c:45:87:93:1b:f3:dc:f3:6d:be:ac:f7:ae:c5:74:
                    ea:49:04:9d:1e:81:3f:99:75:7f:27:d5:b5:c0:de:
                    ca:af:a5:1b:8f:08:b7:7c:9c:6c:59:e0:49:e0:ce:
                    37:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8C:8D:7D:ED:D1:D8:33:08:8C:B3:8D:31:21:CA:AB:3A:24:4A:2F
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3137372e32332e382e302f32312d3231203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         13:97:73:e3:91:9f:29:cc:c6:d3:ae:e2:42:22:14:fb:c5:b5:
         97:26:e5:b5:e6:e3:9f:2c:3f:8f:3b:79:2a:bf:8c:8c:89:2f:
         6a:e9:a2:d1:e2:ca:4a:fd:29:be:35:60:ff:09:5e:9d:c3:7b:
         e0:55:c1:11:8f:f3:b6:aa:5b:35:13:76:ac:25:65:9d:8c:15:
         c2:a9:f4:78:2c:7e:0c:77:b8:cd:9f:c4:78:53:ab:8c:52:22:
         90:c8:4d:a2:31:dd:ae:9b:a2:14:68:93:70:d3:21:3d:b5:8b:
         f7:43:ca:97:dd:0d:47:e0:85:20:c6:7b:e4:8f:37:e2:08:65:
         a9:53:c5:9f:54:c7:4c:11:da:cd:d0:1c:ee:cd:b0:e2:37:e9:
         76:d8:35:a5:39:56:18:e1:00:8f:5f:f8:f7:79:1b:4f:95:c0:
         1d:fd:c3:db:6a:35:94:b4:3d:b6:37:98:77:99:8a:4b:76:61:
         ba:20:4c:6d:f0:80:48:e8:3c:65:9c:e3:1e:99:88:fc:4a:ef:
         e8:75:ca:fc:68:dd:72:d9:6a:e6:94:86:21:9d:33:fd:27:34:
         7d:04:7c:48:79:c4:6d:7a:85:28:58:7c:52:76:2b:0f:61:1f:
         92:08:ab:7d:59:05:d9:fb:35:7d:50:3d:6f:05:cc:0f:a9:d7:
         3b:05:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org